This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json) Hash identifier: CMdWgmoRWjiX5J8fATzGeD7HyGWB4Wpp9nAo8AHElX4= Subject key identifier: 86:26:30:98:6A:EA:40:5C:C3:A8:95:77:E5:E1:6C:28:8D:BE:94:B8 Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Certificate serial: 019AF1D213C6F3A11AB11D696230CA2C3BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft Manifest number: 1412 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: WMA2A4dfB+xDV1lahJy/Zw9p6Ps4sczsM3dxWevDpSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:13:c6:f3:a1:1a:b1:1d:69:62:30:ca:2c:3b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=862630986aea405cc3a89577e5e16c288dbe94b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:9a:68:b0:fd:fe:1b:19:40:11:c6:ed:c4: 42:f7:33:43:b1:90:6a:27:73:c5:59:ff:e2:82:c4: 41:32:85:57:de:f4:1d:56:e5:f6:68:7b:45:b3:7d: 7d:e3:6a:e6:7a:31:68:dd:0c:de:11:13:0c:84:03: 9c:22:3f:9c:55:0b:72:ef:d0:7e:d7:8a:ec:9f:2d: bb:f6:8c:af:e5:70:6f:46:23:4f:b6:e3:06:80:87: b5:87:b5:df:fb:9e:77:6e:33:92:02:00:0a:ec:f9: 9b:65:68:ca:f4:5b:6f:b8:68:23:28:bb:21:5d:08: 42:d9:93:18:35:69:5f:4b:e8:e6:70:b9:3b:11:a1: 74:2d:db:62:2f:37:25:97:1a:de:5a:b0:5f:73:46: 7c:21:14:e2:25:82:25:fc:58:bc:bf:10:4c:df:f6: 0f:cb:89:31:66:33:52:14:d6:bc:27:de:9f:f8:a3: 3e:d2:9c:2f:df:ff:6d:b1:8d:df:bb:86:3e:cd:4f: 33:c5:54:96:97:53:50:c9:85:4d:11:0c:9d:81:3c: 1e:ea:83:6e:f0:df:69:d9:54:8c:51:01:0e:ef:3c: b6:f7:84:a4:9f:5e:d4:e5:0e:01:e3:f4:73:a5:97: 3a:28:7d:64:98:19:a2:80:4b:f2:ff:b0:53:bb:1f: e0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:26:30:98:6A:EA:40:5C:C3:A8:95:77:E5:E1:6C:28:8D:BE:94:B8 X509v3 Authority Key Identifier: keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d0:53:95:63:86:7b:61:d5:6c:5c:cf:6a:86:94:03:4b:22: e0:5f:49:f0:4f:45:a2:87:91:d9:98:cb:2a:0e:80:93:73:72: 66:5c:3d:6a:4e:12:0e:05:69:a2:e6:6b:e8:d6:d4:d6:fa:0e: 04:65:66:4b:26:de:31:fa:c3:06:95:29:ac:ff:81:53:51:42: 44:51:d3:c1:dd:4e:0e:62:45:4f:7c:34:f1:ac:eb:14:90:b8: f1:2d:0a:bb:5e:ff:8b:91:03:bd:ef:fe:d4:b0:10:fd:4c:28: c4:57:9b:76:66:63:ce:6a:4e:dd:a3:ff:89:bc:5a:8b:c0:24: 0d:3c:7c:75:8c:4f:d8:0d:17:ea:43:a9:bf:12:fd:0a:32:40: 20:39:5c:1a:49:ca:8c:45:b9:9d:a7:73:2b:f2:44:75:b4:0e: 16:69:6a:89:66:52:96:f4:60:8e:0c:89:43:85:e0:fc:70:ad: e3:f8:05:b4:41:63:f0:ca:b5:4f:a3:36:61:87:87:1a:33:8e: 33:16:20:38:ed:4d:77:61:32:26:9c:31:f4:27:8b:77:98:bc: 32:30:db:7c:31:d7:5d:b2:6f:64:d8:8c:fc:03:74:94:66:63: 87:30:41:dc:d4:04:bf:d2:1f:08:e1:31:84:01:ed:49:0e:7b: 1b:0b:88:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hPG86EasR1pYjDKLDvcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiODU3ZDlmNjAxM2IwYWJmMGI3NWRlZjNlZTFjODE5YjZj MjU4NGIwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD Eyg4NjI2MzA5ODZhZWE0MDVjYzNhODk1NzdlNWUxNmMyODhkYmU5NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlaaaLD9/hsZQBHG7cRC9zNDsZBq J3PFWf/igsRBMoVX3vQdVuX2aHtFs31942rmejFo3QzeERMMhAOcIj+cVQty79B+ 14rsny279oyv5XBvRiNPtuMGgIe1h7Xf+553bjOSAgAK7PmbZWjK9FtvuGgjKLsh XQhC2ZMYNWlfS+jmcLk7EaF0LdtiLzcllxreWrBfc0Z8IRTiJYIl/Fi8vxBM3/YP y4kxZjNSFNa8J96f+KM+0pwv3/9tsY3fu4Y+zU8zxVSWl1NQyYVNEQydgTwe6oNu 8N9p2VSMUQEO7zy294Skn17U5Q4B4/RzpZc6KH1kmBmigEvy/7BTux/gpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYmMJhq6kBcw6iVd+XhbCiNvpS4MB8GA1UdIwQY MBaAFCuFfZ9gE7Cr8Ldd7z7hyBm2wlhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgt ZWFhOWQ2MTIzZjU3LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zNzhhMGQtMjcwZS00ZjViLTkxZTgtZWFhOWQ2MTIzZjU3 LzEvSzRWOW4yQVRzS3Z3dDEzdlB1SElHYmJDV0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNBTlWOG e2HVbFzPaoaUA0si4F9J8E9FooeR2ZjLKg6Ak3NyZlw9ak4SDgVpouZr6NbU1voO BGVmSybeMfrDBpUprP+BU1FCRFHTwd1ODmJFT3w08azrFJC48S0Ku17/i5EDve/+ 1LAQ/UwoxFebdmZjzmpO3aP/ibxai8AkDTx8dYxP2A0X6kOpvxL9CjJAIDlcGknK jEW5nadzK/JEdbQOFmlqiWZSlvRgjgyJQ4Xg/HCt4/gFtEFj8Mq1T6M2YYeHGjOO MxYgOO1Nd2EyJpwx9CeLd5i8MjDbfDHXXbJvZNiM/AN0lGZjhzBB3NQEv9IfCOEx hAHtSQ57GwuI6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:26 2025 by rpki-client